LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva
User Name
Password
Mandriva This Forum is for the discussion of Mandriva (Mandrake) Linux.

Notices


Reply
  Search this Thread
Old 10-26-2007, 09:40 AM   #1
kipseron
LQ Newbie
 
Registered: Sep 2007
Posts: 3

Rep: Reputation: 0
leave su and go to sudo


how i can disable the su command in mandriva and make my user use sudo instead of the su?
 
Old 10-26-2007, 08:06 PM   #2
aus9
LQ 5k Club
 
Registered: Oct 2003
Location: Western Australia
Distribution: Icewm
Posts: 5,842

Rep: Reputation: Disabled
I am the opposite and have no sudo installed.... sudo is a separate package that needs root powers to install.

2) but it depends also on what the initial problem is

a) currently user X has root password for doing something and may use it do something you do not want

b) currently user X only needs to run known applications which currently need root powers

c) currently user X has vague needs for occassional root powers and can be trusted


If (a) then sudo is no better solution as once an user is added to sudoers they can run sudo su

if (b) you could change the permissions to (eg) /sbin/appZ to allow group user be set to X

if (c) sudo is fine

3) AFAIK su means set user and su without root means su root but su can not be disabled without having sudo and then you can use sudo to re-enable chmod =x the su command.
 
Old 10-26-2007, 08:19 PM   #3
gilead
Senior Member
 
Registered: Dec 2005
Location: Brisbane, Australia
Distribution: Slackware64 14.0
Posts: 4,141

Rep: Reputation: 168Reputation: 168
You can leave them both installed but restrict who can use them. For su, the file to modify is /etc/suauth. For example, to only allow the user steve to su to root and to deny all others (have a look at man suauth for more info):
Code:
root:ALL EXCEPT steve:DENY
For sudo, the file is /etc/sudoers, again the man page for sudoers has config information.
 
Old 10-26-2007, 09:35 PM   #4
aus9
LQ 5k Club
 
Registered: Oct 2003
Location: Western Australia
Distribution: Icewm
Posts: 5,842

Rep: Reputation: Disabled
yes gilead and I am just reading LXF mag that you can edit your
/etc/pam.d/su

auth requisite pam_deny.so

will stop all users having su access.

but your distro may currently stop you from logging directly into root so be aware.

hava look at other /etc/pam.d including kdm or gdm
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: The Ultimate Sudo FAQ — To Sudo Or Not To Sudo? LXer Syndicated Linux News 13 04-13-2013 01:36 AM
slackware 11.0 -- to leave or not to leave out the 2.4 kernel? aquilolumen Slackware - Installation 7 06-30-2007 07:12 PM
Restricting Editing in Sudo (Advanced Sudo Question) LinuxGeek Linux - Software 4 11-04-2006 03:20 PM
leave pirozzi Slackware 6 02-14-2005 02:37 AM
Leave it on or leave it off? admanb Linux - Hardware 4 03-08-2004 12:49 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva

All times are GMT -5. The time now is 01:52 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration